How's my SSL?

#1

Post by splitbrain » Wed, Jan 08, 2014, 10:25 PM UTC

Re: How's my SSL?

#2

Post by PeterWhittaker » Wed, Jan 08, 2014, 11:16 PM UTC

Excellent!

(I mean the site. Not so crazy that FF 26 under OSX 10.9.1 is listed as BAD, but I understand and accept the reasoning.)

Hopefully this will spur the various vendors to abandon old, broken protocols and ciphers.

Re: How's my SSL?

#3

Post by IvyMike » Wed, Jan 08, 2014, 11:16 PM UTC

Thumbs up on everything here.

> Google Chrome 32.0.1700.72 (Official Build 243157) m > OS Windows

Re: How's my SSL?

#4

Post by trentmb » Wed, Jan 08, 2014, 11:25 PM UTC

PeterWhittaker wrote: post #2

Excellent! (I mean the site. Not so crazy that FF 26 under OSX 10.9.1 is listed as BAD, but I understand and accept the reasoning.) Hopefully this will spur the various vendors to abandon old, broken protocols and ciphers.

It only took changing two settings in about:config to get FF 26 to 'pass.'

   security.tls.version.max = 3
   security.ssl3.rsa_fips_des_ede3_sha = false

Re: How's my SSL?

#5

Post by thirdsight » Wed, Jan 08, 2014, 11:29 PM UTC

trentmb wrote: post #4

PeterWhittaker wrote: post #2

Excellent! (I mean the site. Not so crazy that FF 26 under OSX 10.9.1 is listed as BAD, but I understand and accept the reasoning.) Hopefully this will spur the various vendors to abandon old, broken protocols and ciphers.

It only took changing two settings in about:config to get FF 26 to 'pass.' security.tls.version.max = 3 security.ssl3.rsa_fips_des_ede3_sha = false

Thanks. Just did that on my FF 26.0 on windows and it passes now as well.

Rather surprised it was dumping down TLS 1.0!

Re: How's my SSL?

#6

Post by zachnedwich » Wed, Jan 08, 2014, 11:30 PM UTC

Bottom of about page is broken in IE8 http://i.imgur.com/7Mfrw3n.png FY.

Re: How's my SSL?

#7

Post by evv » Wed, Jan 08, 2014, 11:32 PM UTC

Unfortunately "Bad" results for cURL:

$ curl https://www.howsmyssl.com/a/check | python -mjson.tool

Re: How's my SSL?

#8

Post by Spittie » Wed, Jan 08, 2014, 11:32 PM UTC

Nice site, I've been looking for something simple like that (It sure beat https://cc.dcsec.uni-hannover.de/ in niceness, the website I've used before to "check" my browser).

Anyway I'm getting a nice "Probably Okay" using the latest Firefox Nightly.

Re: How's my SSL?

#9

Post by mathrawka » Wed, Jan 08, 2014, 11:40 PM UTC

trentmb wrote: post #4

PeterWhittaker wrote: post #2

Excellent! (I mean the site. Not so crazy that FF 26 under OSX 10.9.1 is listed as BAD, but I understand and accept the reasoning.) Hopefully this will spur the various vendors to abandon old, broken protocols and ciphers.

It only took changing two settings in about:config to get FF 26 to 'pass.' security.tls.version.max = 3 security.ssl3.rsa_fips_des_ede3_sha = false

Why is that not set by default?

Re: How's my SSL?

#10

Post by gcp » Wed, Jan 08, 2014, 11:41 PM UTC

thirdsight wrote: post #5

trentmb wrote: post #4

Earlier quoted context omitted.

It only took changing two settings in about:config to get FF 26 to 'pass.' security.tls.version.max = 3 security.ssl3.rsa_fips_des_ede3_sha = false

Thanks. Just did that on my FF 26.0 on windows and it passes now as well. Rather surprised it was dumping down TLS 1.0!

New TLS versions (1.1/1.2) have been included since Firefox 24, but won't be enabled by default until Firefox 27.

https://bugzilla.mozilla.org/show_bug.cgi?id=733647

https://bugzilla.mozilla.org/show_bug.cgi?id=861266